Bugtraq mailing list archives

cold fusion scanner


From: gualtimi () SHU EDU (hYP0[13/\\r)
Date: Thu, 22 Apr 1999 14:24:05 -0400


This is a multi-part message in MIME format.
--------------B683CD4CDBA0903C5A9ECD9F
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I made this scanner to test if servers are susceptable to the l0pht Cold

Fusion advisory, I know it's not really nessicary to have a scanner to
test this, because it is simple to do so through a web browser, however
someone out there might get some use out of it, and besides it was fun
to write (isn't that the "hacker" spirit)...  I will attach it to this
email.

hYP0[13/\r - lUSt (Linux Users Strike Today) - hypoclear () jungle net

--------------B683CD4CDBA0903C5A9ECD9F
Content-Type: application/x-unknown-content-type-cfile;
 name="coldscan.c"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
 filename="coldscan.c"
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--------------B683CD4CDBA0903C5A9ECD9F--



Current thread: